Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/QOnNYoNedzIXImWm32z2Ct3c90c.roa
File: QOnNYoNedzIXImWm32z2Ct3c90c.roa (raw, json)
Hash identifier: pRLt0UO5SQmidQAAA48WbObpOoPIzb/1Ybd/XiDNDEM=
Subject key identifier: 40:E9:CD:62:83:5E:77:32:17:22:65:A6:DF:6C:F6:0A:DD:DC:F7:47
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181D859BD769540FF05CAB8FF6EB198B2DD
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/QOnNYoNedzIXImWm32z2Ct3c90c.roa
Signing time: Thu 07 Jul 2022 11:09:28 +0000
ROA not before: Thu 07 Jul 2022 11:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:59:bd:76:95:40:ff:05:ca:b8:ff:6e:b1:98:b2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 7 11:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40e9cd62835e7732172265a6df6cf60adddcf747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:40:1e:32:c7:77:24:2e:0f:ef:b5:37:96:
ef:2c:9f:2a:b3:e4:69:e3:3a:f2:ca:79:70:e2:e8:
4b:bf:8a:69:91:88:52:2d:ad:96:9b:df:c6:9e:58:
b7:b0:dd:68:d6:91:7e:03:c0:3e:87:75:18:22:4a:
5b:d0:ef:f1:59:3b:f0:0a:cd:68:a0:e1:0d:ff:26:
6d:05:e9:0c:39:54:30:99:2a:1a:a8:9a:3c:19:14:
52:b1:7d:17:67:ca:85:c3:d1:f9:e7:bd:c1:da:35:
84:3e:22:9a:04:ce:8a:a5:a1:f0:2f:4f:f8:a6:8b:
b5:30:5c:4f:4c:97:b4:b4:8b:3f:0a:fd:04:3a:b8:
ff:1d:27:60:22:1b:59:92:5a:ec:c1:57:32:93:5d:
1b:25:f4:24:94:82:bf:dc:f3:44:66:56:f6:66:6d:
11:9c:96:ce:9a:b0:0d:8f:5f:46:12:ee:e0:ca:d7:
fe:9c:cb:5c:4c:32:17:ec:9f:84:61:53:4d:14:9b:
fd:05:a6:72:54:af:da:39:72:3d:81:17:12:40:0f:
ab:d9:eb:28:c7:f1:13:ec:d0:a8:d2:55:18:b6:f1:
a0:b4:4b:72:b5:5f:da:7e:99:b6:0d:fc:de:e0:d8:
67:fb:aa:25:a0:79:26:ce:86:25:3b:c8:71:0f:c2:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:CD:62:83:5E:77:32:17:22:65:A6:DF:6C:F6:0A:DD:DC:F7:47
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/QOnNYoNedzIXImWm32z2Ct3c90c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
84.252.64.0/22
176.118.188.0/23
185.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
90:b1:d3:58:82:f8:42:8e:fb:97:b7:52:f2:5f:e9:56:cf:f0:
82:d9:cc:fe:1d:d4:67:8d:d7:64:fc:95:88:87:54:01:74:6b:
ae:4a:e4:16:d9:0f:53:56:4b:9e:a8:7f:82:9d:04:eb:d4:11:
f5:04:35:9f:2d:d2:4d:52:73:a8:4e:d2:c9:80:7a:d7:9d:0c:
b9:54:90:60:f0:f4:b1:32:ea:c8:7b:74:bc:a3:54:de:67:55:
3e:ce:f2:f8:5d:fc:cd:e7:47:43:3c:91:2b:7d:11:56:bb:0e:
2a:ba:d7:16:81:5f:3e:9d:60:7f:8d:3c:61:b6:cf:69:cb:51:
60:89:62:82:4e:a5:52:13:cd:f0:cc:87:af:22:ac:19:80:8a:
0f:d2:14:38:12:f8:1f:8f:a5:f8:f1:12:5f:05:12:fb:81:83:
40:7a:12:8a:44:89:0d:8e:f3:8e:12:7c:16:ee:fc:22:6b:61:
da:e1:0d:07:00:34:7a:31:53:f3:53:1b:24:bf:64:6d:0e:ab:
b2:78:3d:d8:5e:17:38:8e:93:14:5c:5c:3c:1c:a1:81:57:f6:
43:50:e3:5d:75:5e:dc:5d:e4:ba:d5:f2:13:7a:94:aa:00:97:
93:57:9f:6a:58:75:94:0c:6b:62:ad:27:d8:0a:94:d5:86:ae:
64:30:be:d8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYHYWb12lUD/Bcq4/26xmLLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzQ3NDgxZjJjOThmYmI3MGRjYThkNjVjMjNkZTRmY2Ez
NzU4M2QwHhcNMjIwNzA3MTEwOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGU5Y2Q2MjgzNWU3NzMyMTcyMjY1YTZkZjZjZjYwYWRkZGNmNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrlAHjLHdyQuD++1N5bvLJ8qs+Rp
4zryynlw4uhLv4ppkYhSLa2Wm9/Gnli3sN1o1pF+A8A+h3UYIkpb0O/xWTvwCs1o
oOEN/yZtBekMOVQwmSoaqJo8GRRSsX0XZ8qFw9H5573B2jWEPiKaBM6KpaHwL0/4
pou1MFxPTJe0tIs/Cv0EOrj/HSdgIhtZklrswVcyk10bJfQklIK/3PNEZlb2Zm0R
nJbOmrANj19GEu7gytf+nMtcTDIX7J+EYVNNFJv9BaZyVK/aOXI9gRcSQA+r2eso
x/ET7NCo0lUYtvGgtEtytV/afpm2Dfze4Nhn+6oloHkmzoYlO8hxD8JU3wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEDpzWKDXncyFyJlpt9s9grd3PdHMB8GA1UdIwQY
MBaAFI50dIHyyY+7cNyo1lwj3k/KN1g9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgt
NjUyMWQzOTVmMTMyLzEvUU9uTllvTmVkeklYSW1XbTMyejJDdDNjOTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80MGRiNmItZGE4NS00YzlkLWE5NDgtNjUyMWQzOTVmMTMy
LzEvam5SMGdmTEpqN3R3M0tqV1hDUGVUOG8zV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTVMUAwQC
VPxAAwQBsHa8AwQBubFMMA0GCSqGSIb3DQEBCwUAA4IBAQCQsdNYgvhCjvuXt1Ly
X+lWz/CC2cz+HdRnjddk/JWIh1QBdGuuSuQW2Q9TVkueqH+CnQTr1BH1BDWfLdJN
UnOoTtLJgHrXnQy5VJBg8PSxMurIe3S8o1TeZ1U+zvL4XfzN50dDPJErfRFWuw4q
utcWgV8+nWB/jTxhts9py1FgiWKCTqVSE83wzIevIqwZgIoP0hQ4Evgfj6X48RJf
BRL7gYNAehKKRIkNjvOOEnwW7vwia2Ha4Q0HADR6MVPzUxskv2RtDquyeD3YXhc4
jpMUXFw8HKGBV/ZDUONddV7cXeS61fITepSqAJeTV59qWHWUDGtirSfYCpTVhq5k
ML7Y
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:42 2025 by rpki-client